Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/knz6Xw4z2uEuIsXLMXq-Fb5UI6g.roa
File: knz6Xw4z2uEuIsXLMXq-Fb5UI6g.roa (raw, json)
Hash identifier: hMEID2/go+YKwNS7QcjlOlkzDOxlORpxUsPh3z+I5RE=
Subject key identifier: 92:7C:FA:5F:0E:33:DA:E1:2E:22:C5:CB:31:7A:BE:15:BE:54:23:A8
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01941F8C492142EF01C03B4D2CC9D7D3CF35
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/knz6Xw4z2uEuIsXLMXq-Fb5UI6g.roa
Signing time: Wed 01 Jan 2025 01:47:54 +0000
ROA not before: Wed 01 Jan 2025 01:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216137
IP address blocks: 81.180.72.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 06:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:49:21:42:ef:01:c0:3b:4d:2c:c9:d7:d3:cf:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 01:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=927cfa5f0e33dae12e22c5cb317abe15be5423a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:eb:13:5c:d8:f7:c8:50:05:be:ef:c4:a0:c6:
ca:8a:cc:eb:5a:22:d9:d0:17:f3:56:ab:95:94:8f:
0d:ae:7e:ef:63:b3:09:52:48:cf:dd:4e:0f:3e:6b:
4e:a3:49:f8:61:5e:02:cd:af:36:1e:ac:d7:cd:23:
1c:ec:7f:52:5c:b3:53:01:85:ef:54:0c:47:d0:ce:
34:a6:23:ef:02:17:f4:44:36:ab:08:96:85:ac:0b:
f5:53:cf:6c:1d:e7:5c:bd:40:3f:1e:02:59:ee:27:
f4:97:f4:6b:a4:0b:12:ac:cb:c1:2f:84:33:ea:4b:
f3:91:e9:26:d0:4a:5c:df:ed:81:1d:66:76:db:68:
d9:e0:c7:22:c2:6c:32:9b:76:59:d1:8e:7c:ce:0f:
c7:5a:36:92:19:41:64:55:29:86:b1:8d:df:93:89:
20:49:53:30:df:9a:c1:83:d4:8a:37:76:34:2a:66:
95:4a:58:62:e2:d6:59:e0:52:f2:d1:d5:98:9b:f4:
0a:44:12:2f:39:cd:4e:38:af:5a:7b:90:4d:6e:d8:
7b:a2:97:93:68:0a:16:0b:78:ee:e0:c3:85:53:3d:
c1:c0:61:99:28:46:73:51:a5:dc:4a:65:01:f7:6a:
19:d4:b8:47:f8:36:b6:31:7c:7e:d5:4a:0c:be:b0:
0a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:7C:FA:5F:0E:33:DA:E1:2E:22:C5:CB:31:7A:BE:15:BE:54:23:A8
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/knz6Xw4z2uEuIsXLMXq-Fb5UI6g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.180.72.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:99:98:7c:35:da:43:78:b8:90:6c:5d:68:f0:6d:c9:ba:e5:
fd:01:4d:af:e8:12:c0:29:f4:58:a0:27:94:14:a3:5f:56:6e:
9b:d8:13:9d:08:be:3c:6b:36:da:92:70:a3:cf:7f:2d:86:26:
21:4b:39:0a:86:75:22:27:2c:ea:b1:dd:92:68:4f:d2:2c:8d:
38:6c:aa:05:0b:d4:6a:b2:19:6e:18:e8:0e:9c:4c:21:f6:99:
ab:c8:3e:ba:d3:e7:5c:41:32:3a:29:1b:8d:bc:00:07:7b:d4:
72:d2:09:58:3a:b5:83:f8:7f:4c:52:5e:4f:68:6d:3d:56:5b:
7e:ba:4f:d6:31:97:55:72:a4:83:c4:b5:f2:f0:9f:4a:ba:c7:
6a:bf:5a:38:2d:bc:66:0c:ed:29:7e:53:3d:39:47:b8:e0:76:
a3:d8:01:33:0a:30:fc:a8:d6:1c:34:92:89:a6:47:1f:87:48:
d6:31:6e:37:3a:0c:55:07:55:8e:46:7c:2a:1d:c0:29:0a:2d:
10:66:e0:fd:f1:2e:13:97:20:88:52:03:e2:e8:14:b1:6d:f5:
80:6f:a0:1b:40:dd:b0:30:2d:c1:c6:04:f5:22:b4:3b:bd:a5:
3c:ba:79:73:97:a0:5f:dd:b8:ac:fb:ce:fb:47:0c:21:db:df:
65:09:54:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:30:24 2025 by rpki-client